« Volver al listado

CVE-2024-12085

Estado: ModificadaAlta (7.5)—

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (22)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-12085",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-12085",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-27T04:55:14.796829Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secalert@redhat.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "3.3.0"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://github.com/RsyncProject/rsync",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.0"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 10",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.4.1-2.el10",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.0.6-12.el6_10.1",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.2-12.el7_9.1",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-20.el8_10",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.2::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-7.el8_2.3",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_e4s:8.4::baseos",
            "cpe:/o:redhat:rhel_tus:8.4::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-12.el8_4.3",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_e4s:8.4::baseos",
            "cpe:/o:redhat:rhel_tus:8.4::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-12.el8_4.3",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_e4s:8.4::baseos",
            "cpe:/o:redhat:rhel_tus:8.4::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-12.el8_4.3",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-14.el8_6.6",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-14.el8_6.6",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/o:redhat:rhel_tus:8.6::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-14.el8_6.6",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:rhel_eus:8.8::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.1.3-20.el8_8.1",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 9",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.2.3-20.el9_5.1",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 9",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.2.3-20.el9_5.1",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.0::appstream",
            "cpe:/o:redhat:rhel_e4s:9.0::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.2.3-9.el9_0.3",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::appstream",
            "cpe:/o:redhat:rhel_eus:9.2::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.2.3-19.el9_2.1",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream",
            "cpe:/o:redhat:rhel_eus:9.4::baseos"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "versions": [
            {
              "status": "unaffected",
              "version": "0:3.2.3-19.el9_4.1",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rsync",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.12::el8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.12",
          "versions": [
            {
              "status": "unaffected",
              "version": "412.86.202502100314-0",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rhcos",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.13::el8",
            "cpe:/a:redhat:openshift:4.13::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.13",
          "versions": [
            {
              "status": "unaffected",
              "version": "413.92.202503112237-0",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rhcos",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.14::el8",
            "cpe:/a:redhat:openshift:4.14::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.14",
          "versions": [
            {
              "status": "unaffected",
              "version": "414.92.202502111902-0",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rhcos",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el8",
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "versions": [
            {
              "status": "unaffected",
              "version": "415.92.202501281917-0",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rhcos",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.16.0-202501311735.p0.g2cb0020.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ansible-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.16.0-202501311933.p0.g4246d04.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-helm-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.16.0-202501311605.p0.g4246d04.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-operator-sdk-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "versions": [
            {
              "status": "unaffected",
              "version": "417.94.202502051822-0",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rhcos",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/aws-kms-encryption-provider-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/azure-kms-encryption-provider-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/azure-service-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/cloud-network-config-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/container-networking-plugins-microshift-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/driver-toolkit-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/egress-router-cni-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/frr-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/insights-runtime-exporter-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/insights-runtime-extractor-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/kube-metrics-server-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/kubevirt-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/network-tools-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/oc-mirror-plugin-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/openshift-route-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-agent-installer-api-server-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-agent-installer-utils-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-apiserver-network-proxy-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gc395190.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-aws-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-aws-cluster-api-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-aws-ebs-csi-driver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-aws-pod-identity-webhook-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-azure-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-azure-cloud-node-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g987615c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-azure-cluster-api-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-azure-disk-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-azure-disk-csi-driver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-azure-file-csi-driver-operator-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-azure-file-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-baremetal-cluster-api-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-baremetal-installer-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-baremetal-machine-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-baremetal-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-baremetal-runtimecfg-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cli-artifacts-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cli-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cloud-credential-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-api-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-authentication-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-autoscaler-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-autoscaler-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-baremetal-operator-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-bootstrap-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-capi-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g3385690.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-cloud-controller-manager-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-config-api-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-config-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-control-plane-machine-set-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-dns-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-etcd-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-image-registry-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-ingress-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502101302.p0.g763313c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-kube-apiserver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-kube-cluster-api-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-kube-controller-manager-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502041632.p0.g6182930.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-kube-scheduler-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-machine-approver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-monitoring-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-network-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-node-tuning-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-olm-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-openshift-apiserver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-openshift-controller-manager-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-policy-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-samples-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-storage-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-update-keys-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-cluster-version-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-configmap-reloader-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-console-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-console-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-container-networking-plugins-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-coredns-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-driver-manila-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-driver-manila-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-driver-nfs-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-external-attacher-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-external-provisioner-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-external-resizer-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-external-snapshotter-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-livenessprobe-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-node-driver-registrar-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-snapshot-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-csi-snapshot-validation-webhook-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-deployer-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501281202.p0.g336d783.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-docker-builder-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-docker-registry-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g914783c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-etcd-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-gcp-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-gcp-cluster-api-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-gcp-pd-csi-driver-operator-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-gcp-pd-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-gcp-workload-identity-federation-webhook-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502010001.p0.g061909a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-haproxy-router-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-hyperkube-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-hypershift-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ibmcloud-cluster-api-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ibm-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ibmcloud-machine-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ibm-vpc-block-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.ge905646.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-image-customization-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-insights-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-installer-altinfra-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-installer-artifacts-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-installer-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ironic-agent-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ironic-machine-os-downloader-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ironic-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ironic-static-ip-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-keepalived-ipfailover-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-kube-proxy-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g526498a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-kube-rbac-proxy-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-kube-state-metrics-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-kube-storage-version-migrator-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-kubevirt-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-libvirt-machine-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-machine-api-provider-aws-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-machine-api-provider-azure-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.ga371641.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-machine-api-provider-gcp-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-machine-api-provider-openstack-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-machine-api-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-machine-config-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-machine-os-images-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-monitoring-plugin-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-multus-admission-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-multus-cni-microshift-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-multus-cni-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-multus-networkpolicy-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-multus-route-override-cni-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-multus-whereabouts-ipam-cni-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502040032.p0.gc864494.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-must-gather-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-networking-console-plugin-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-network-interface-bond-cni-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-network-metrics-daemon-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-nutanix-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-nutanix-machine-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-oauth-apiserver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-oauth-proxy-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd352778.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-oauth-server-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-olm-catalogd-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-olm-operator-controller-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-openshift-apiserver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-openshift-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-openshift-state-metrics-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-openstack-cinder-csi-driver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-openstack-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-openstack-cluster-api-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-operator-framework-tools-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-operator-marketplace-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-operator-registry-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ovn-kubernetes-microshift-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-ovn-kubernetes-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-pod-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-powervs-block-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-powervs-block-csi-driver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-powervs-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-powervs-machine-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-prometheus-alertmanager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-prometheus-config-reloader-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-prometheus-node-exporter-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-prometheus-operator-admission-webhook-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-prometheus-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-prometheus-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-prom-label-proxy-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-service-ca-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g700802f.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-telemeter-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-tests-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g314589c.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-thanos-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-tools-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-vmware-vsphere-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-vmware-vsphere-csi-driver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-vsphere-cloud-controller-manager-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-vsphere-cluster-api-controllers-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-vsphere-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-vsphere-csi-driver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-vsphere-csi-driver-syncer-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ose-vsphere-problem-detector-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ovirt-csi-driver-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift4/ovirt-csi-driver-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "versions": [
            {
              "status": "unaffected",
              "version": "418.94.202502100215-0",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "rhcos",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.17-22",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/cluster-logging-operator-bundle",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.17-10",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/cluster-logging-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v6.8.1-454",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/elasticsearch6-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.17-17",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/elasticsearch-operator-bundle",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v1.0.0-537",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/elasticsearch-proxy-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.17-4",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/elasticsearch-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v0.4.0-339",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/eventrouter-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.17-4",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/fluentd-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v1.1.0-320",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/log-file-metric-exporter-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.1-552",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/logging-curator5-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v3.3.2-9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/logging-loki-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.17-5",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/logging-view-plugin-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.17-12",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/loki-operator-bundle",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.8.17-5",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/loki-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v0.1.0-725",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/lokistack-gateway-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v0.1.0-342",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/opa-openshift-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.8::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.8-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v0.28.1-88",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/vector-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.9.11-25",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/cluster-logging-operator-bundle",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.9.11-11",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/cluster-logging-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v0.4.0-340",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/eventrouter-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.9.11-5",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/fluentd-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v1.1.0-321",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/log-file-metric-exporter-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v3.3.2-8",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/logging-loki-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.9.11-6",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/logging-view-plugin-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.9.11-9",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/loki-operator-bundle",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v5.9.11-4",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/loki-rhel9-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v0.1.0-724",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/lokistack-gateway-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v0.1.0-341",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/opa-openshift-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:logging:5.9::el9"
          ],
          "vendor": "Red Hat",
          "product": "RHOL-5.9-RHEL-9",
          "versions": [
            {
              "status": "unaffected",
              "version": "v0.34.1-30",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "openshift-logging/vector-rhel9",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift_compliance_operator:1::el9"
          ],
          "vendor": "Red Hat",
          "product": "OpenShift Compliance Operator 1",
          "versions": [
            {
              "status": "unaffected",
              "version": "1.8.0",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "compliance/openshift-compliance-must-gather-rhel8",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4",
          "packageName": "openshift/ose-rhel-coreos-9",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-01-14T18:15:25.123",
  "references": [
    {
      "url": "https://access.redhat.com/errata/RHBA-2025:6470",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2024:6122",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0324",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0325",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0637",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0688",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0714",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0774",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0787",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0790",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0849",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0884",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:0885",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:1120",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:1123",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:1128",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:1225",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:1227",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:1242",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:1451",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:21885",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:2701",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/security/cve/CVE-2024-12085",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330539",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://kb.cert.org/vuls/id/952657",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20250131-0002/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.kb.cert.org/vuls/id/952657",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secalert@redhat.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time."
    },
    {
      "lang": "es",
      "value": "Se encontró un fallo en rsync daemon que podría activarse cuando rsync compara sumas de comprobación de archivos. Este fallo permite a un atacante manipular la longitud de la suma de comprobación (s2length) para provocar una comparación entre una suma de comprobación y una memoria no inicializada y filtrar un byte de datos de pila no inicializados a la vez."
    }
  ],
  "lastModified": "2026-09-21T15:17:25.433",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3A9FCFD-8115-4C36-95D1-625B124ED9F9",
              "versionEndExcluding": "3.3.0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:openshift:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FD9C791-100F-4672-AB43-94B80DFAF818"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40449571-22F8-44FA-B57B-B43F71AB25E2"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FFF1D51-ABA8-4E54-B81C-A88C8A5E4842"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "486B3F69-1551-4F8B-B25B-A5864248811B"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4716808D-67EB-4E14-9910-B248A500FAFA"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EBB38E1-4161-402D-8A37-74D92891AAC5"
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4B66318-326A-43E4-AF14-015768296E4E"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62C31522-0A17-4025-B269-855C7F4B45C2"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C74F6FA-FA6C-4648-9079-91446E45EE47"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B03506D7-0FCD-47B7-90F6-DDEEB5C5A733"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4CF8D2F-DACA-49C2-A9F4-63496B0A9A80"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A47EF78-A5B6-4B89-8B74-EEB0647C549F"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F7DAD7C-9369-4A87-A1D0-4208D3AF0CDC"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2_aarch64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D85E0DBA-A856-472A-8271-A4F37C35F952"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "213593D4-EB5A-4A1B-BDF3-3F043C5F6A6C"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01363FFA-F7A6-43FC-8D47-E67F95410095"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA15BFFC-B8E8-4EE3-8E14-8C95DF6C99C4"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32AF225E-94C0-4D07-900C-DD868C05F554"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB056B47-1F45-4CE4-81F6-872F66C24C29"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E068ABB-31C2-416E-974A-95E07A2BAB0A"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22C65F53-D624-48A9-A9B7-4C78A31E19F9"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F843B777-5C64-4CAE-80D6-89DC2C9515B1"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "778ACA25-ED77-4EFC-A183-DE094C58B268"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23D471AC-7DCA-4425-AD91-E5D928753A8C"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.8_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B4A41C6-7ECB-4F3D-AB10-96F2D00B6840"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E07C1C58-0E5F-4B56-9B8D-5DE67DB00F79"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED521457-498F-4E43-B714-9A3F2C3CD09A"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC3CBA5D-9E5D-4C46-B37E-7BB35BE8DADB"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0516993E-CBD5-44F1-8684-7172C9ABFD0A"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6897676D-53F9-45B3-B27F-7FF9A4C58D33"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E28F226A-CBC7-4A32-BE58-398FA5B42481"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76C24D94-834A-4E9D-8F73-624AFA99AAA2"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F32CA554-F9D7-425B-8F1C-89678507F28C"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39D345D3-108A-4551-A112-5EE51991411A"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FDD919E-B7FE-4EC5-8D6B-EC9A4723D6E2"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E645F29-0FE0-477F-969A-55F009AB018C"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C138DAF-9769-43B0-A9E6-320738EB3415"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.8_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18037675-B4D3-401E-96D3-9EA3C1993920"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DA48001-66CC-4E71-A944-68D7D654031E"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC6A25CB-907A-4D05-8460-A2488938A8BE"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C30F155-DF7D-4195-92D9-A5B80407228D"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41F1A2F3-BCEF-4A8C-BA2F-DF1FF13E6179"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC10D919-57FD-4725-B8D2-39ECB476902F"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1272DF03-7674-4BD4-8E64-94004B195448"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1CA946D-1665-4874-9D41-C7D963DD1F56"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E881C927-DF96-4D2E-9887-FF12E456B1FB"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB096D5D-E8F6-4164-8B76-0217B7151D30"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "083AAC55-E87B-482A-A1F4-8F2DEB90CB23"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FD9BF0E-7ACF-4A83-B754-6E3979ED903F"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "554AA8CA-A930-4788-B052-497E09D48381"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:almalinux:almalinux:8.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F34AA7F4-6ECE-4FA5-A310-3509648BD7C7"
            },
            {
              "criteria": "cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57B93E9A-1483-4FF7-BF45-BD0D7D9F1747"
            },
            {
              "criteria": "cpe:2.3:o:almalinux:almalinux:10.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66FD02F3-C1C2-4E1D-98C1-8889004437D4"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:archlinux:arch_linux:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4824AE2D-462B-477D-9206-3E2090A32146"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92121D8A-529E-454A-BC8D-B6E0017E615D"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:nixos:nixos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "213883D5-9E62-4496-82E3-D5377995C257",
              "versionEndExcluding": "24.11"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:suse:suse_linux:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FB65EF0-0E6A-4178-8564-3CC96891A072"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:tritondatacenter:smartos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8EBD774C-F48F-45EC-A5DD-B1E56E54EF71",
              "versionEndExcluding": "20250123"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}